NeuroByte LLC ("NeuroByte," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect information when you visit our website at getneurobyte.ai (the "Site"), engage us for services, or use any of our software products or platforms (collectively, the "Services").

By using the Site or Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Site or Services.

1. Scope of This Policy

This Privacy Policy applies to information we collect:

Through our Site and any forms, demos, or contact features we offer
When you communicate with us by email, phone, or other channels
When you engage NeuroByte for custom development services or use our productized tools

This Policy does NOT apply to:

Data we process on behalf of business clients in the course of providing Services to them. In those cases, our client is the data controller, and our handling of that data is governed by the agreement between NeuroByte and the client (typically a Master Services Agreement and Data Processing Addendum).
Third-party websites, applications, or services that may be linked from our Site or integrated with our Services. Those are governed by their own privacy policies.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily submit, including:

Contact information: name, business name, email address, phone number, mailing address
Account information: username, password, role, and account preferences if you register for any of our products
Payment information: billing address and payment method details. Card payments are processed by our payment processor (currently Stripe); we do not store full payment card numbers on our systems. ACH and check payments are processed through our banking partners.
Project and communication content: information you share with us during scoping calls, requirements gathering, support requests, or general correspondence
Marketing preferences: your subscription status for any newsletters or product updates

2.2 Information Collected Automatically

When you visit the Site or use our Services, we may automatically collect:

Device and usage data: IP address, browser type and version, operating system, device identifiers, referring URLs, pages viewed, time spent, click activity, and approximate location derived from IP
Call and voice data: if you call us or we call you, we may record, monitor, and transcribe the call for quality, training, security, and record-keeping, where permitted by law and after any legally required notice. Where all-party consent is required, we will obtain it before recording. We do not create or store voiceprints or other voice-based biometric identifiers without your prior consent. Where a voice feature involves a voiceprint or similar biometric identifier, we will obtain any legally required consent before creating it, retain it only as long as reasonably necessary for the purpose for which it was collected, and destroy it in accordance with applicable law or upon your verified request.
Cookies and similar technologies: see Section 8

2.3 Information Provided by Clients on Behalf of Their End Users

When a NeuroByte client uses our Services to process information about their own customers, employees, or other end users, that data may include personally identifiable information, internal business data, or transactional records. We process this information solely as a service provider on behalf of the client and according to our agreement with that client.

2.4 Information from Third Parties

We may receive information about you from third parties such as referral partners, business directories, integration partners (e.g., Google APIs you authorize us to access), and service providers used to deliver our Services.

3. How We Use Information

We use the information described above for the following purposes:

To provide and operate the Services, including delivering custom development work, hosting productized tools, and providing client support
To communicate with you about your account, projects, support requests, and changes to our Services
To process payments and manage billing
To improve and develop our Services, including analyzing usage patterns, debugging, and building new features
For marketing and business development, including sending newsletters and product announcements (you can opt out at any time)
For security and fraud prevention, including monitoring for unauthorized access, abuse, or violations of our Terms of Service
To comply with legal obligations, respond to lawful requests, and enforce our agreements
For our legitimate business interests, including operating, evaluating, and improving our business and Services

4. Use of Artificial Intelligence

NeuroByte uses third-party artificial intelligence and machine learning services (including large language models) as part of how we build and operate our Services. Where AI is used in connection with information you or your client organization provide:

We do not use client data to train, fine-tune, or improve any AI or machine-learning model owned by, operated by, or fine-tuned or trained at the direction of NeuroByte, including private or vendor-hosted models.
We use AI providers under commercial terms that, as of the effective date of this Policy and to our knowledge, do not permit those providers to use client data to train or improve their models, other than limited processing a provider may perform to operate, secure, and monitor its service for abuse and to comply with law. We periodically review these terms, but we do not control and cannot guarantee third-party practices.
We minimize the data sent to AI providers to what is necessary to perform the requested function.
AI outputs are probabilistic and may contain errors. Where AI is used in client-facing or decision-supporting workflows, we work with clients to design appropriate human review.

If you would like specific disclosures about which AI providers we use, retention windows, or sub-processors, we will provide them on request. For clients with a service agreement, specific binding commitments on these points can be addressed in that agreement.

We do not sell your personal information for monetary consideration. We use analytics and marketing technologies (see Section 8); to the extent that use is considered a "sale" or "share" under California law, you can opt out as described in Sections 8 and 10. We may share information in the following circumstances:

Service providers and sub-processors that help us operate our business, including hosting providers, payment processors, analytics providers, AI/ML providers, communication tools, and customer support tools. These parties are contractually limited to using the information only as necessary to provide their service to us.
Business clients receive information processed on their behalf, as defined in the Service Agreement with that client.
Professional advisors including lawyers, accountants, and auditors, under confidentiality obligations.
Legal compliance where we believe in good faith that disclosure is required by law, court order, regulation, or to protect the rights, property, or safety of NeuroByte, our clients, or others.
Business transfers in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business. In such cases, we will require the recipient to honor the commitments in this Privacy Policy or provide notice of any material changes.
With your consent for any other purpose disclosed at the time you provide the information.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by category: contact and marketing information is retained until you unsubscribe or ask us to delete it and for a reasonable period thereafter; account information is retained for the life of your account and for a limited period after closure; billing and transaction records are retained for the period required by applicable tax, accounting, and audit law; and automatically collected device and usage logs are retained for a limited period consistent with our security and analytics needs. Where we cannot state an exact period, we determine it using criteria such as our legal obligations, the duration of the client relationship, and applicable dispute or backup windows.

For data processed on behalf of clients, retention is governed by our agreement with the client. After termination of services, we will delete or return client data on the timeline specified in the applicable agreement, or, if none is specified, as described in Section 14.4(b) of our Terms of Service, subject to legal hold or backup retention windows.

7. Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. These include access controls, encryption in transit, vendor security review, and reasonable employee training.

No system is perfectly secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of any account credentials and for promptly notifying us of any suspected unauthorized use.

If we confirm a security incident affecting your Confidential Information or Client Data on systems we control, we will notify you without undue delay and in any event within seventy-two (72) hours after that confirmation, as further described in Section 8 of our Terms of Service.

8. Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to operate the Site, remember your preferences, analyze traffic, and support our marketing. You can control cookies through your browser settings. Disabling cookies may limit functionality of the Site.

We may use third-party analytics tools (such as Google Analytics or similar). These tools collect information sent by your browser as part of a web page request and may use cookies to recognize repeat visitors.

We do not load the third-party analytics and advertising technologies described in this Section until you accept them through our cookie notice. We honor the Global Privacy Control (GPC): to the extent we sell or share personal information as those terms are defined under applicable law, we treat a GPC signal received from your browser or device as a valid request to opt out of that sale or sharing. We do not currently respond to "Do Not Track" browser signals, which are a separate and older mechanism.

9. Your Choices and Rights

You have the following choices regarding your information:

Marketing communications: you can opt out of marketing emails by following the unsubscribe instructions in those messages or contacting us directly. If you receive text messages from us, you can opt out by replying STOP; you can opt out of automated marketing calls by asking us to stop. We may still send you transactional or service-related communications.
Access, correction, deletion: you may request to access a copy of, correct, or delete the personal information we hold about you by contacting us at the address in Section 13. We will acknowledge your request promptly (within 10 business days where required) and aim to respond within 45 days, or within any shorter or longer period required by applicable law, and we may extend once by an additional 45 days with notice. There is no charge to make these requests, and we will not deny you services, charge a different price, or otherwise penalize you for exercising them. We may need to verify your identity by matching information you provide against our records before fulfilling certain requests, so that we do not disclose or delete information at the direction of someone other than you. An authorized agent may submit a request on your behalf with your written, signed permission, and we may still ask you to verify your own identity and confirm the agent's authority.
Account closure: you may request deletion of your account by contacting us. Some information may be retained as required by law or for legitimate business purposes.

If your personal information is processed by NeuroByte on behalf of a business client (for example, you are an end user of a tool we built for a client), please direct your request to that client. We will support the client in responding.

10. State-Specific Privacy Disclosures

California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. These include the right to know what personal information we collect, the right to request deletion, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information, and the right not to be discriminated against for exercising your rights.

We do not sell personal information for monetary consideration. We use the analytics and marketing technologies described in Section 8 (including third-party analytics and an advertising conversion pixel). To the extent the use of those technologies is considered a "sale" or "share" under California law, you may opt out by using the Global Privacy Control as described in Section 8, or by disabling non-essential cookies through your browser or device settings.

Categories and sources. The categories of personal information we collect are described in Section 2 (including identifiers such as name and contact details, commercial information, internet and network activity, approximate geolocation derived from IP, and professional or business information). We collect these from you directly, from your use of the Site and Services, and from the third-party sources described in Section 2.4, and we disclose them to the categories of service providers described in Section 5 for the business purposes described in Section 3. In the preceding twelve (12) months we have not sold personal information for monetary consideration; any "sale" or "share" under California law is limited to the analytics and advertising technologies described in Section 8, which you can opt out of as described above.

Sensitive Personal Information. The only Sensitive Personal Information we collect as a business is the account log-in credentials you create for our products. We use these credentials solely to provide and secure your account, which is a purpose for which the California right to limit the use of Sensitive Personal Information does not apply under Cal. Civ. Code 1798.121(a). We do not use or disclose these credentials to infer characteristics about you.

To exercise your rights, contact us using the information in Section 13. We will verify your request and respond within the timeframes required by law. You may designate an authorized agent to make a request on your behalf.

Other States

If you are a resident of a state with a comprehensive privacy law (such as Virginia, Colorado, Connecticut, Texas, or Utah), you may have the right to confirm whether we process your personal information and to access, correct, delete, or obtain a portable copy of it, and to opt out of targeted advertising, the sale of personal information, and certain profiling. To exercise these rights, contact us using the information in Section 13. If we deny your request, you may appeal by emailing [email protected] with the subject line "Privacy Appeal"; we will respond in writing within the period required by your state's law (generally 45 to 60 days) and, where required, provide the contact information for your state Attorney General. We comply with applicable privacy laws in the states where we do business.

11. Children's Privacy

The Site and Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. We also do not knowingly sell or share the personal information of consumers under 16 years of age, as those terms are defined under California law, without opt-in consent as required by law. If you believe a child has provided us with personal information, please contact us and we will take appropriate action.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this Policy. If we make material changes, we will provide notice through the Site and, where we have your email address and the change materially affects your rights, by email before the change takes effect where practicable. Changes required to comply with applicable law may take effect on shorter notice. Your continued use of the Site or Services after the effective date of any update constitutes acceptance of the updated Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact:

NeuroByte LLC Attn: Privacy 1706 N 1200 W #1032, Layton, UT 84041 Email: [email protected]